別格で売上ナンバーワンMD-101試験にはは2023年最新のMicrosoft練習問試験合格させます
Microsoft Windows 10 Release 1809 and later問題集でMD-101試験完全版問題で試験学習ガイド
Microsoft MD-101: Managing Modern Desktops試験は、現代のデスクトップ管理に関するスキルと知識を検証したいITプロフェッショナルにとって必須の認定資格です。この試験は、現代のIT環境でWindows 10デバイスを展開および管理するためのさまざまなトピックをカバーしています。この試験に合格することは、IT業界で高く評価されているMicrosoft 365 Certified: Modern Desktop Administrator Associate認定資格を取得するための要件の1つです。
質問 # 172
You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company.
You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1.
Which query should you run in Log Analytics?
Event
- A. | where SourceSystem = = "Computer1"
ETWEvent - B. | where Computer = = "Computer1"
Event - C. | where SourceSystem = = "Computer1"
- D. | where Computer = = "Computer1"
ETWEvent
正解：D
解説：
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events
質問 # 173
Your network contains an Active Directory domain named contoso.com.
You create a provisioning package named Package1 as shown in the following exhibit.
What is the maximum number of devices on which you can run Package1 successfully?
- A. 0
- B. unlimited
- C. 1
- D. 2
正解：B
質問 # 174
You have an Azure Active Directory (Azure AD) tenant that syncs to an on-premises Active Directory
domain.
The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled
in Microsoft Intune. The Microsoft Office settings on the computers are configured by using a Group Policy
Object (GPO).
You need to migrate the GPO to Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows
質問 # 175
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically on a Windows 10 computer during a maintenance window.
Solution: In Group policy, from the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary.
Does this meet the goal?
- A. Yes
- B. No
正解：B
解説：
Explanation/Reference:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
質問 # 176
You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.
You add Windows 10 images to Share1 as shown in the following table.
Which images can be used in the Standard Client Task Sequence, and which images can be used in the
Standard Client Upgrade Task Sequence?
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Box 1: Image1, Image2, Image3, Image4, and Image5.
All images.
Standard Client Task Sequence
Standard Client task sequence. The most frequently used task sequence. Used for creating reference images
and for deploying clients in production.
Box 2: Image1, Image2, Image3, and Image4 only.
Exclude image5 with applications.
Standard Client Upgrade Task Sequence
Standard Client Upgrade task sequence. A simple task sequence template used to perform an in-place upgrade
from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data,
settings, applications, and drivers.
Reference:
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-depl
質問 # 177
You are evaluating which devices are compliant.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
質問 # 178
You need to recommend a solution to meet the device management requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/app-protection-policy.md
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#do-not-forward-option-for-emails
質問 # 179
Your company uses Microsoft Intune. You have a Microsoft Store for Business account.
You need to ensure that you can deploy Microsoft Store for Business apps by using Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
質問 # 180
You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant.
You configure a Windows Autopilot deployment profile as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
References:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
質問 # 181
You have an Azure Active Directory Premium Plan 2 subscription that contains the users shown in the following table.
You purchase the devices shown in the following table.
You configure automatic mobile device management (MDM) and mobile application management (MAM) enrollment by using the following settings:
* MDM user scope: Group1
* MAM user scope: Group2
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Graphical user interface, text, application Description automatically generated
Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/android-enroll
https://powerautomate.microsoft.com/fr-fr/blog/mam-flow-mobile/
質問 # 182
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Text Description automatically generated
質問 # 183
You have a Microsoft 365 E5 subscription that contains 1,000 Windows 11 devices. All the devices are enrolled in Microsoft Intune.
You plan to integrate Intune with Microsoft Defender for Endpoint.
You need to establish a service-to-service connection between Intune and Defender for Endpoint.
Which settings should you configure in the Microsoft Endpoint Manager admin center?
- A. Connectors and tokens
- B. Premium add-ons
- C. Tenant enrollment
- D. Microsoft Tunnel Gateway
正解：A
解説：
Microsoft Defender for Endpoint - Important Service and Endpoint Settings You Should Configure Right Now.
As a prerequisite, however, head to tenant administration > connectors and tokens > Microsoft Defender for Endpoint and confirm the connection is enabled. You previously set this up in the advanced settings of Microsoft 365 Defender.
質問 # 184
Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). All computers are joined to the domain and registered to Azure AD.
The network contains a Microsoft System Center Configuration Manager (Current Batch) deployment that is configured for co-management with Microsoft Intune.
All the computers in the finance department are managed by using Configuration Manager. All the computers in the marketing department are managed by using Intune.
You install new computers for the users in the marketing department by using the Microsoft Deployment Toolkit (MDT).
You purchase an application named App1 that uses an MSI package.
You need to install App1 on the finance department computers and the marketing department computers.
How should you deploy App1 to each department? To answer, drag the appropriate deployment methods to the correct departments. Each deployment method may be used once, more than once, or not at all. You may need to drag the split bat between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/intune/apps-add
https://docs.microsoft.com/en-us/sccm/apps/get-started/create-and-deploy-an-application
質問 # 185
You have computers that run Windows 10 and are managed by using Microsoft Intune.
Users store their files in a folder named D:\Folder1.
You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.
What should you configure in the device configuration profile?
- A. Microsoft Defender Application Guard
- B. Microsoft Defender Application Control
- C. Microsoft Defender Exploit Guard
- D. Microsoft Defender SmartScreen
正解：C
解説：
Reference:
https://www.microsoft.com/security/blog/2017/10/23/windows-defender-exploit-guard-reduce-the-attacksurface-
against-next-generation-malware/
質問 # 186
You have 500 Windows 10 devices enrolled in Microsoft Intune.
You plan to use Exploit protection in Microsoft Endpoint Manager to enable the following system settings on the devices:
* Data Execution Prevention (DEP)
* Force randomization for images (Mandatory ASLR)
You need to configure a Windows 10 device that will be used to create a template file.
Which protection areas on the device should you configure in the Windows Security app before you create the template file? To answer, drag the appropriate protection areas to the correct settings. Each protection area may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Box 1: App & browser control
Graphical user interface, text, application Description automatically generated
Note: Data Execution Prevention (DEP): This mitigation prevents code from being run from data-only memory pages.
Box 2: App & browser control
Force randomization for images (Mandatory ASLR). This mitigation forcibly relocates images not compiled with /DYNAMICBASE.
Reference:
https://support.microsoft.com/en-us/windows/app-browser-control-in-windows-security-8f68fb65-ebb4-3cfb-4bd
質問 # 187
You need to meet the technical requirements for the LEG department computers.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/windows/deployment/update/windows-analytics-azure-portal
質問 # 188
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
You save a provisioning package named Package1 to a folder named C:\Folder1.
You need to apply Package1 to Computer1.
Solution: At a command prompt, you change the current folder to C:\Folder1, and then you run the RegSvr32.exe Package1.ppkg command.
Does this meet the goal?
- A. Yes
- B. No
正解：B
解説：
Explanation
To install a provisioning package, navigate to Settings > Accounts > Access work or school > Add or remove a provisioning package > Add a package, and select the package to install.
Reference:
https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-apply-package
質問 # 189
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.
Contoso.com contains the devices shown in the following table.
In Intune, you create the app protection policies shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 190
You need to recommend a solution to meet the device management requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/app-protection-policy.md
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#do-not-forward-option-for
質問 # 191
You have a computer named Computer1 that runs Windows 10.
Computer1 has the users shown in the following table.
User1 signs in to Computer1, creates the following files, and then signs out:
* docx in C:\Users\User1\Desktop
* docx in C:\Users\Public\Public Desktop
* docx in C:\Users\Default\ Desktop
User3 signs in to Computer1 and creates a file named File4.docx in C:\Users\User3\Desktop.
User2 has never signed in to Computer1.
How many DOCX files will appear on the desktop of each user the nest time each user signs in? To answer,
select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
質問 # 192
You need to resolve the performance issues in the Los Angeles office.
How should you configure the update settings? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization
https://2pintsoftware.com/delivery-optimization-dl-mode/
質問 # 193
Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.
Which settings should you configure?
- A. Device platforms
- B. Sign-in risk
- C. Locations
- D. Device state
正解：D
解説：
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-state
質問 # 194
You have 200 computers that run Windows 10.
You need to create a provisioning package to configure the following tasks:
* Remove the Microsoft News and the Xbox Microsoft Store apps.
* Add a VPN connection to the corporate network.
Which two customizations should you configure? To answer, select the appropriate customizations in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Connectivityprofiles
Policies
References:
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-connectivityprofiles
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider#appli
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-policies
質問 # 195
You need to recommend a solution to meet the device management requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/app-protection-policy.md
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#do-not-forward-option-for-emails
質問 # 196
You have a Microsoft Intune subscription associated to an Azure Active Directory (Azure AD) tenant named contoso.com.
Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.
You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.
Which DNS records do you need?
- A. one CNAME record only
- B. three TXT records
- C. one TXT record only
- D. three CNAME records
正解：D
解説：
Reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#simplify-windows-enrollment-without
質問 # 197
......
Microsoft MD-101試験は、Microsoft 365認定を獲得するために必要な2つの試験の1つです。この認定は、デスクトップ管理と管理分野でキャリアを進めたいIT専門家に最適です。また、Windows 10の管理と展開の専門知識を実証したい専門家にも適しています。
最適な道は練習テストMicrosoft MD-101問題集：https://www.jpntest.com/shiken/MD-101-mondaishu
MD-101問題集が待ってます試験問題解答：https://drive.google.com/open?id=1SioewKX9WSerDnZ0jyjxlxiTQrHhDiu8